Lucene search
+L

65139 matches found

Circl
Circl
added 2026/07/06 10:32 p.m.12 views

CVE-2026-55500

creationtimestamp| type| source ---|---|--- 2026-07-06 22:32:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz5g2pefd23 2026-07-10 15:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjavfcqz24 2026-07-10 17:00:40+00:00| seen|...

9.9CVSS6.1AI score0.00387EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/06 9:49 p.m.8 views

GHSA-473P-56XX-VG67 Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

Summary In Kiwi TCMS the fields TestCase.extralink and TestPlan.extralink were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site scripting exploitation...

5.8AI score
SaveExploits0References4
Circl
Circl
added 2026/07/06 9:42 p.m.9 views

GHSA-287W-MXQ6-X2CP

creationtimestamp| type| source ---|---|--- 2026-07-06 21:42:10+00:00| seen| https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e...

5.9AI score
SaveExploits0References1
Circl
Circl
added 2026/07/06 9:22 p.m.17 views

CVE-2025-53831

creationtimestamp| type| source ---|---|--- 2026-07-06 21:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzjfmjlm2i...

8.2CVSS5.9AI score0.00164EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/06 8:51 p.m.12 views

CVE-2026-14898

creationtimestamp| type| source ---|---|--- 2026-07-06 20:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxsv3wbl2n...

6.5CVSS5.9AI score0.00324EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/06 8:41 p.m.12 views

CVE-2026-54060

creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24 2026-07-07 05:11:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27 2026-07-20 22:37:44+00:00| published-proof-of-concept|...

7.5CVSS4.8AI score0.00418EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/07/06 8:27 p.m.12 views

Directory Traversal

Overview org.webjars.npm:decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the...

9.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/06 8:27 p.m.22 views

Directory Traversal

Overview decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory...

9.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/06 8:27 p.m.12 views

Directory Traversal

Overview @xhmikosr/decompress is an Extracting archives made easy Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory containment check...

9.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
Circl
Circl
added 2026/07/06 8:26 p.m.11 views

CVE-2026-55379

creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...

7.5CVSS6.2AI score0.00421EPSS
SaveExploits1References2
Circl
Circl
added 2026/07/06 8:18 p.m.13 views

CVE-2026-9182

creationtimestamp| type| source ---|---|--- 2026-07-06 20:18:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z 2026-07-08 03:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h...

9.8CVSS5.9AI score0.00352EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/06 8:15 p.m.14 views

EUVD-2026-24981

rm: --preserve-root bypassed via a symlink to / string check instead of dev/inode...

7.7CVSS5.9AI score0.00185EPSS
SaveExploits0References5
Circl
Circl
added 2026/07/06 8:12 p.m.12 views

CVE-2026-35371

creationtimestamp| type| source ---|---|--- 2026-07-06 20:12:01+00:00| seen| https://gist.github.com/alon710/f5f0c292471d2cc05167d6fa94d49a4e...

3.3CVSS5.9AI score0.00123EPSS
SaveExploits1References1
Circl
Circl
added 2026/07/06 8:9 p.m.13 views

CVE-2026-44362

creationtimestamp| type| source ---|---|--- 2026-07-06 20:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvhisihn24...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/06 8:7 p.m.17 views

CVE-2026-53763

creationtimestamp| type| source ---|---|--- 2026-07-06 20:07:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvcz6rwr2v...

3.8CVSS5.9AI score0.00149EPSS
SaveExploits0References1
Circl
Circl
added 2026/07/06 8:4 p.m.11 views

CVE-2026-55380

creationtimestamp| type| source ---|---|--- 2026-07-06 20:04:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyv6ureav2v 2026-07-20 22:37:39+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm...

7.5CVSS4.7AI score0.00418EPSS
SaveExploits1References2
Circl
Circl
added 2026/07/06 7:58 p.m.14 views

CVE-2026-58403

creationtimestamp| type| source ---|---|--- 2026-07-06 19:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuu3futf27...

6.5CVSS5.9AI score0.00318EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/06 7:54 p.m.12 views

EUVD-2026-24994

install -D: symlink race in directory creation allows arbitrary file overwrite...

6.3CVSS6AI score0.00108EPSS
SaveExploits0References5
Circl
Circl
added 2026/07/06 7:52 p.m.15 views

CVE-2026-14536

creationtimestamp| type| source ---|---|--- 2026-07-06 19:52:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyuiedjme2v...

8.8CVSS5.9AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/06 7:41 p.m.37 views

CVE-2026-14898

The CVE affects the OpenAI Codex desktop app for macOS, where rendering remote images from Markdown in model responses can exfiltrate data. An indirect prompt injection in content (e.g., from connected tools or untrusted sources) could cause the model to construct a remote image URL containing se...

6.5CVSS6.1AI score0.00324EPSS
SaveExploits0References1
Rows per page
Query Builder